Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Usability issue - 25th-word/PASSWD/Passphrase confusion. #172

Open
PC-Admin opened this issue Feb 16, 2023 · 1 comment
Open

Usability issue - 25th-word/PASSWD/Passphrase confusion. #172

PC-Admin opened this issue Feb 16, 2023 · 1 comment

Comments

@PC-Admin
Copy link

I believe I've run into a usability issue.

Upon moving from testnet8 to testnet9 I basically assumed that I was supposed to enter the same ./PASSWD value into the "passphrase section", I had no idea at all that:

  1. MMX uses a 25th word, and my putting a new value into the "With Passphrase" section results in you unlocking another wallet.
  2. The "With Passphrase" is different from your ./PASSWD value.
  3. The PASSWD value isn't actually related to your wallet, it's just to stop cross-scripting attacks to the GUI.
  4. I'm supposed to record the 'With Passphrase' value if i set it, and if I don't I'll loose access to my funds.

There definitely needs to be more "idiot-proofing" in the GUI imo... Like I'm really not a novice user and I was bitten by this, I have no doubt if MMX became popular that you would have a LOT of less experienced users running into this same issue.

As we can see here there isn't really any indication that by setting a "passphrase" I'm actually setting the 25th word of my seed and I'll need to hang onto that passphrase to recovery my finds in the future:

create_wallet_page

@PC-Admin
Copy link
Author

The file name 'PASSWD' likely has something to do with it, it's too similar to "Passphrase", renaming it as 'GUI-LOCK' or something might help avoid this confusion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant